Bug 911273

Summary: [installation] Upgrade to 3.2 from a 3.1 without apache as proxy is not working
Product: Red Hat Enterprise Virtualization Manager Reporter: Pavel Stehlik <pstehlik>
Component: ovirt-engine-setupAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED CURRENTRELEASE QA Contact: Pavel Stehlik <pstehlik>
Severity: high Docs Contact:
Priority: urgent    
Version: 3.2.0CC: acathrow, alourie, bazulay, dyasny, iheim, mgoldboi, Rhev-m-bugs, sbonazzo, sgrinber, ykaul
Target Milestone: ---Keywords: Regression
Target Release: 3.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: integration
Fixed In Version: sf-10 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 922807, 948448    

Description Pavel Stehlik 2013-02-14 16:00:53 UTC
Description of problem:
 Update from si27 => sf7 succeed, however engine doesn't start on https port.

server.log:
====================
2013-02-14 16:49:04,717 ERROR [org.apache.tomcat.util.net.jsse.JSSESocketFactory] (MSC service thread 1-3) Failed to load keystore type PKCS12 with path /etc/pki/ovirt-engine/keys/apache.p12 due to /etc/pki/ovirt-engine/keys/apache.p12 (Permission denied): java.io.FileNotFoundException: /etc/pki/ovirt-engine/keys/apache.p12 (Permission denied)
        at java.io.FileInputStream.open(Native Method) [rt.jar:1.7.0_09-icedtea]
        at java.io.FileInputStream.<init>(FileInputStream.java:138) [rt.jar:1.7.0_09-icedtea]
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:374) [jbossweb.jar:]
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:299) [jbossweb.jar:]



Version-Release number of selected component (if applicable):
sf7

How reproducible:
100%

Steps to Reproduce:
1. install 3.1 without apache as proxy
2. update to 3.2
3.
  
Actual results:
update succeed, but:
engine service is not occupying original https port

ll /etc/pki/ovirt-engine/keys/apache.p12
-rw-r-----. 1 apache apache 4250 Feb 14 16:23 /etc/pki/ovirt-engine/keys/apache.p12

Expected results:
working environ on same port(s) after upgrade

Additional info:
workaround:
chown ovirt:ovirt /etc/pki/ovirt-engine/keys/apache.p12; service ovirt-engine restart

Comment 6 Itamar Heim 2013-06-11 09:11:55 UTC
3.2 has been released

Comment 7 Itamar Heim 2013-06-11 09:11:56 UTC
3.2 has been released

Comment 8 Itamar Heim 2013-06-11 09:39:06 UTC
3.2 has been released